Linux vendors rush out e-mail server patches

Several major Linux vendors have warned they are vulnerable to four flaws in a widely used IMAP e-mail server from Carnegie Mellon University's Cyrus Electronic Mail Project. The flaws could allow an attacker to take over a server.

Among the Linux vendors issuing patches for the Cyrus IMAP server are MandrakeSoft, Gentoo and Debian. IMAP (Internet Message Access Protocol) is one of the most popular standards for accessing e-mail, and the Cyrus software is designed for use by small to large enterprises.